Where we're diverting from the standard ReCoBS approach is that we're using a single firewall with a third ethernet port for the DMZ, and we're running both the firewall and the X2Go terminal server as virtual machines on a stripped down Debian Linux with KVM. Also, we're providing a web proxy server with a default deny policy, so that you can whitelist "​safe"​ domains like microsoft and antivirus updates, or online banking portals, and access those using your locally installed browser or online banking software (which makes more sense from a security standpoint, if you think about it).

Where we're diverting from the standard ReCoBS approach is that we're using a single firewall with a third ethernet port for the DMZ, and we're running both the firewall and the X2Go terminal server as virtual machines on a stripped down Debian Linux with KVM. Also, we're providing a web proxy server with a default deny policy, so that you can whitelist "​safe"​ domains like microsoft and antivirus updates, or online banking portals, and access those using your locally installed browser or online banking software (which makes more sense from a security standpoint, if you think about it).

-

While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case with enough CPU and RAM for up to 5 concurrent users. A picture, showing the box on top of a stack of copy paper for easy size comparison, is available [[http://​www.baur-itcs.de/​20-servermodelle/​10-lexcomputechtwister|here]].

+

While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case (taking up less space than a stack of copy paper) ​with enough CPU and RAM for up to 10 concurrent users.

This allows us to offer an affordable solution even for small offices like a general practicioner'​s office.

This allows us to offer an affordable solution even for small offices like a general practicioner'​s office.